instructions-audit
Prompt-injection tripwire for CLAUDE.md and .claude/rules files: flags invisible-Unicode smuggling, secret read/exfil directives, curl|sh, decode-and-execute, and hook/settings tampering as instructions load, then locks the session (every prompt and tool call denied) until a human clears it.
- GitHub stars
- 581
Install
/plugin install instructions-audit@claude-code-hooksRun it inside Claude Code after adding the marketplace with /plugin marketplace add karanb192/claude-code-hooks.
Sponsors
Promote your product hereReach 125k+ visitors monthlyPromote your product hereReach 125k+ visitors monthly
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any language
Agent CaffeineSponsoredClose your lid, come back to finished workSnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthlyWaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthlyknobsSponsoredSee your site on any phone, any day, in any languageDetails
- Marketplace
- karanb192/claude-code-hooks
- Source
- plugins/instructions-audit
- Category
- Security
More from karanb192/claude-code-hooks
All 22- nerf-receipts
- notify-permission
- pr-provenance-stamp
- protect-secrets
- protect-tests
- session-logger
- standup-autopilot
- subagent-spawn-cap
- auto-stage
- block-dangerous-commands
- bounty-board
- cache-tax
- case-insensitive-guard
- config-guard
- config-watch
- context-hogs
- dead-end-registry
- dead-rules-audit
- format-code
- git-safety
- guard-pack